Improper input validation in Nokia N70

CVE-2007-0523

The Nokia N70 phone allows remote attackers to cause a denial of service (continual modal dialogs and UI unavailability) by repeatedly trying to OBEX push a file over Bluetooth, as demonstrated by ussp-push.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.006 (47.5th percentile) — read the EPSS interpretation.

Affected products

Nokia N70
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cve@mitre.org (x_refsource_SREASON, third-party-advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)